Sh4mefulDMARC Spoof Detection, Confounders
This page lists known email confounders — legitimate services whose forwarding or inspection behavior disrupts DMARC authentication — organized by owner, network, and IP. Learn more about this data.
Confounder Owners (top 9 by message volume)
| Owner | Networks | Unique IPs | Messages |
|---|---|---|---|
| Amazon | 4 | 34 | 49,932 |
| Microsoft | 3 | 4,403 | 26,847 |
| 1 | 1 | 1,237 | |
| Proofpoint | 4 | 114 | 658 |
| Mimecast | 4 | 30 | 418 |
| Cisco | 2 | 22 | 216 |
| Intermedia | 1 | 1 | 70 |
| Barracuda | 1 | 30 | 70 |
| OpenText | 1 | 4 | 36 |
Confounder Networks
Top 28 by failure volume| Network | Owner | Unique IPs | Messages |
|---|---|---|---|
| AT-88-Z ⚠ | Amazon | 26 | 46,580 |
| UK-MICROSOFT-20060601 ⚠ | Microsoft | 1,016 | 13,548 |
| MSFT ⚠ | Microsoft | 3,333 | 13,224 |
| AMAZON-2011L ⚠ | Amazon | 1 | 2,370 |
| GOOGLE ⚠ | 1 | 1,237 | |
| AMAZO-4 ⚠ | Amazon | 6 | 903 |
| PROOFPOINT-NET-NORTH-AMERICA ⚠ | Proofpoint | 82 | 496 |
| MNA-95 ⚠ | Mimecast | 25 | 299 |
| CISL-7 ⚠ | Cisco | 14 | 184 |
| EONIX ⚠ | Eonix/Scamalytics | 1 | 128 |
| PROOF ⚠ | Proofpoint | 27 | 116 |
| AMAZON ⚠ | Amazon | 1 | 79 |
| MICROSOFT-IPV6-BLK ⚠ | Microsoft | 54 | 75 |
| BARRA-7 ⚠ | Barracuda | 30 | 70 |
| INTRMD-1 ⚠ | Intermedia | 1 | 70 |
| MIMECAST-NET2 ⚠ | Mimecast | 1 | 61 |
| MIMECAST-NET ⚠ | Mimecast | 2 | 55 |
| ZIXCORP ⚠ | OpenText | 4 | 36 |
| IRONPORT-DH ⚠ | Cisco | 8 | 32 |
| UK-PROOFPOINT-20151223 ⚠ | Proofpoint | 3 | 24 |
| NAVI-207-211 ⚠ | 5 | 24 | |
| pfptnl ⚠ | Proofpoint | 2 | 22 |
| RN-52 ⚠ | 14 | 22 | |
| PAUBOX-01 ⚠ | 6 | 19 | |
| UK-MIMECAST-NET3 ⚠ | 3 | 9 | |
| UK-MIMECAST-NET1 ⚠ | 2 | 6 | |
| MIMECAST-AU ⚠ | Mimecast | 2 | 3 |
| UK-MIMECAST-NET2 ⚠ | 1 | 2 |